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(54) On line shopping system and the method of payment settlement 


(57) When performing on-line shopping using the 
Internet, and when performing payment settlement for a 
product by a credit card, user's card data runs over the 
Internet, leaving the possibility of card data leakage, 
thereby causing a security problem. The user decides 
the product he or she wants to buy via a computer net¬ 
work (internet) bom a user system. Thai, a transmis¬ 
sion unit calls up a service center to send order date 


including the credit card data via a settlement network. 
Service center invoices the sales price to an approval 
center based on the order data. Approval center pays 
the price to service center. Then, service center sends 
the order data to the shopping system. A delivery 
processing unit then delivers the product to the user 
based on the order data. 
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pig.. 6 is a ligure showing an example erf purchase 
product selection screen of this invention. ’ 

Purchase product selection screen 32 displays data 1 
of products the user wished to purchase on proctoct list 
screen 31. This example also displays the data of the s 
producls purchased when the user went on-line shop¬ 
ping before The user once again selects and confirms 
the products to be purchased among the product list ' 
displayed on purchase product selection screen 33. 

This selection operation of the product is performed by re 
product confirmation unit 10. 

Fig. 7 is a figure showing an example of a screen for 
inputting personal data of the user of this invention. 

The user inputs personal data such as name or 
address to a personal data entry screen 33. ,s 

Pig. 8 is a figure shewing an example of a screen for 
inputting credit card data of the user of this invention. 

The user performs an input of credit card data with 
which to settle payment to card data entry screen 34. 

Fig. 9A and Fig. 9B are the figures showing exam- so 
ptes of screens for finishing on-fine shopping of this 
invention. 

On the screen of Fig. 9A, when the OK button is 
clicked by the mouse, user system 5 enciphers the 
product data, personal data, payment settlement data as 
{credit card data) by encipherment unit 12. Then, it 
transmits the product data! personal data, and payment 
settlement data 21 to service center 7 via payment net¬ 
work 6 by transmission uni! 11. And, after the product 
data, personal data, and payment settlement data 21 3o 
have been sent to service center 7 and the use of the 
credit card is approved, a screen o! Fig. 9B is displayed, 
notifying that the on-line shopping has been completed. 

Fig. 10 is a figure showing the flow of ordered data 
of this invention. 35 

With this invention, ordered product data is sent to 
a business terminal or the PCs of each shop from ihe 
service center as shown in Fig. 10. 

Fig. 11 is a ligure showing Ihe ttow of products of 

this invention. 40 

With this invention, the product is delivered from 
each shop to foe user as shewn in Fig. 11. 

Fig. 12 shows a Figure showing foe flow of credit 
cant data of this invention. 

With this invention, as shown in Fig. 12, foe credit is 
can) data passes through the service center from the 
user computer, and sent to foe card company via the 
CAFIS network. Because of this, the credit card data of 
foe user can be stmt to foe card company foe user using 
without passing over foe internet 50 

The CAFIS is an acronym for Credit And Finance 
Information Switching System. It means foe credit on¬ 
line system tor shared use developed by NTT (Nippon 
Telegraph and Telephone) Corporation. 

Fig. 13 is a figure showing foe ftow of payment of ss 
this invention. 

As shown in Fig. 13, foe service center sends foe 
payment collected from the credit card companies to 
each shop. 


Frgs. 14 and 15 are figures showing the data sent 
from foe user system to the service center of Ihis inven¬ 
tion. 

Next, according to the flowcharts of Fig. 2 and Fig. 

3, the procedure of on-tine shopping of this invention is 
explained. 

The procedure of on-line shopping is explained 
below wherein the computer network 4 is foe Internet. 
The Internet refers to foe network among public organi¬ 
zations based on the TCP/IP. Approval center 13 is var¬ 
ious kinds of crectit card companies. 

it is possible to configure user system 5 of this 
invention with a computer and one cr more programs tor 
ordering products The above-mentioned program is a 
program having functions of product selection unit 8, 
download unit 9, product confirmation unit 10. transmis¬ 
sion unit 11, and encipherment unit 12. Aiso, it is 
assumed that foe programs with which to order foe 
products memorized in a floppy disk or CD-ROM are to 
be set ready on foe user computer. 

First of all, the user connects foe user computer to 
the Internet or computer network 4 lor starting a session 
and on-line shopping. Then, foe user selects a mail in 
which to do shopping, out of shopping mall A 3a to 
shopping maH C 3c offered by shop system 2a to 2c, 
and connects foe user computer to foe shopping mail 
(St). Connection to the internet and connection to 
shopping maiis use the same method with foe regular 
connection method of on-line shopping of internet. For 
instance, when foe user selects shopping malt A 3a, the 
information screen 30 for shopping mail A of Fig. 4 fe 
displayed on foe user computer. Then, foe user lets 
product fist screen 31 displayed from stropping mall A. 
to select which products to boy. Selection of products is 
performed by a clicking foe mouse at foe MARK button 
(S2). Processing of the above S2 is performed by prod¬ 
uct selection unit 8- When the MARK button is clicked, 
download unit 9 fetches the product data of foe product 
foe user wanted to buy at the above S2 from foe product 
data base provided for shop A system 2a. The seller 
data shown in Figs. 14and 15 also included in foe prod¬ 
uct data and downloaded. Download unit 9 stores foe 
received product data into a hard disk provided for ihe 
user computer. The product data shown in Figs. 14 and 
15 is an example of downloaded data by download unit 
9. To select more producls to buy from foe same shop- 
png matt, repeat foe above steps from S2 to S3 (S4). To 
select a product to buy by connecting another shopping 
mail, the user calls up another shopping mall and repeal 
i foe above steps from SI to S3 (S4). The download unit 
downloads and stores foe product data with same for¬ 
mat as shewn in Figs. 14 and 15 even when foe product 
data is downloaded from other shopping malls. After fin¬ 
ishing selection of all products foe user wants to pur- 
r chase (S3), foe user finishes the session with foe 
internet (S5). 

After finishing the session with the Internet (S5), a 
routine or another program that has foe above product 
confirmation unit 10, transmission unit 11, and enct- 
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phermerrt unit 12 is activated. The above program can 
be stored anywhere in a floppy disk, CD-ROM, or hard 
disk. When a program provided with product confirma¬ 
tion unit 10 , transmission unil 11 , and encipherment unit 
12 is started, purchase product selection screen 32 is 
displayed on the user computer. On the purchase prod¬ 
uct selection screen 32, product data downloaded and 
stored in a hard disk by download imitate displayed. On 
purchase product selection screen 32, products pur¬ 
chased previously through on-line shopping are also 
displayed besides the product that the user wants to 
purchase this time by tire on-line stropping via the Inter¬ 
net This is because download unit 9 downloads and 
stores new purchasing product data adding to the prod¬ 
uct data purchased in the past through on-tine shopping 
without deleting them. It is possible to delete product 
data purchased by the past by downloading new prod¬ 
uct data On purchase product selection screen 32, for 
instance, it is assumed that a purchase of T shirts was 
made on October 15,1995. it is possible that the user 
wants to purchase aTshirt again on November 1,1995. 
The user confirms tire product to purchase this time on 
purchase product selection screen 32 (SB). The corrlir- 
mation method is to move the cursor to the product to 
be purchased, and stick the mouse, then move the cur¬ 
sor to tire purchase button in the center of purchase 
product selection screen 32 and then click the mouse. 
The user can confirm the selection of the products from 
the different shopping mails by the purchase product 
selection screen 32. /'bore operation is a process 
implemented by product confirmation unit 10. After fin¬ 
ishing the -selection of products to purchase, the user 
clicks the TRANSMIT button on purchase product 
selection screen 32. Then, personal data input screen 
33 of Fig. 7 is displayed on the computer. The user 
inputs the personal data (S7) accordng to the input 
guide on persona) data input screen 33. When personal 
data has been input and the user clicks the OK button 
on personal data entry screen 33, a card data entry 
screen 34 of Fig. 3 fe displayed on the computer. The 
user inputs the credit card data with which to make pay* 
rnert according to the input guide on card data entry 
screen 34 (S3). With the format shown in Figs. 14 and 
15 , the persona) data and the credit card data are cop¬ 
ied and appended to each product data of the confirmed 
products by the product confirmation units. Accordingly, 
one credit card data can be used for the different prod¬ 
ucts from the same Of different shopping malls. When 
the user dicks toe OK button on card data entry screen 
34, toe screen of Fig. 9A fe displayed for toe reconfirma¬ 
tion of product purchase. When the OK button fe clicked 
on tire screen of Fig. 9A, toe user system 5 (toe pro¬ 
gram that makes product order) automatically calls 
service center 7 , sets settlement network 6 to transmit 
product data, personal data, and payment settlement 
data (credit card data) 21 to service center 7 The trans¬ 
mission is performed, for example, by pomt-to-pomt pro¬ 
tocol (PPP) via settlement network 6 using toe public 
line which toe third party cannot access. 


Figs. 14 and 15 shew the product data (including 
seller data), personal data, payment settlement data 
(credit card data) 21 which user system 5 sends to serv- 
ic 6 c&nter 7- 

S In Fig. 15, although E-MAIL ADDRESS is not 
included in personal data entry screen 33, E-MAIL 
ADDRESS can be added to personal data entry screen 
33 as an inpul item. Input items can be changed arbi¬ 
trarily hased on toe needs of credit card companies ur 
10 shops, fhe seller dala of Fig. 14 and Fig. 15 may be 
downloaded by the database shop systems 2 a to 2 c 
when Ihe session with toe Internet fe cut by the user. Or. 
it may be downloaded by toe database shop systems 2 a 
to 2c when toe data is transferred from user system 5 to 


IVPV mrcirmv—*,-- _ 

is service cenler 7. When toe transmission ends normally, 
and toe approval of caid use is confirmed by service 
center 7, the screen of Fig. 9B is displayed on toe user 

computer. . 

The above steps fromSI to S8 are the portion the 
20 use, fe directly involved in on-line shopping. The 
processing explained below at S19 relates to sendee 
center 7. approval center 13, and each shop system 2a 

to 2c. . 

The product data, persona! data, and payment set¬ 
ts Dement data 21 shownm Fig. 14 and Fig. 15 are the 
data before they are enciphered by encipherment wit 

12 . , 
Service center receives ihe product dala, personal 
data, and payment settlement data 21 via settlement 
so network 6 (SlO). Because the product data, personal 
data, and payment settlement data 21 have been enci¬ 
phered, service center 7 decodes them to original data 
by decoding unit 14. The encipherment method and 
decoding method fe explained in detail in Embodiment 
36 2 Based on the decoded product data, personal data, 
and payment settlement data 21, service cenler 7 then 
checks credit authorization ot toe user to approval 

center 13 (S11). ^ 

As described toe download unit downloads toe 

40 product data with the same format frc«n a plurality of dif¬ 
ferent shopping malls, the transmission unit transmits 
one card data as toe payment settlement data ter toe 
plurality of products downloaded from the plurality of dif¬ 
ferent shopping mads; As the result toe service center 
46 requests toe approval center to collectively settle toe 
plurality of products with one credit card data 

Approval center 13 of this invention is a credit card 
company. Among toe product data, personal data and 
payment settlement data 21, service center 7 gets data 
so necessary for credit authorization check, and sends toe 
credit authorization data to approval center 13, which is 
a corresponding credit card company, via the CAF1S 
network to check credit authorization 26. The CAFIS 
has toe protocol which a plurality of cs edit card compa¬ 
ss nies commonly use for checking credit authorization 
from the a edit authorization checking terminal installed 
in toe contract shop. Upon receiving data via TCP/IP 
from user system 5. service center 7 converts neces¬ 
sary data into toe data that suits the protocol used by 


7 



13 


EP 0 779 587 A2 


14 


the CAFIS for credit authorization check. Approval 
center 13 or a credit card company returns the result of ■ 
credit authorization check 26 to service center 7. (The 
returning of the result of credit authorization check from 
approval center 13 to service center 7 is not shown in 5 
Fig. 1.) H approval is not given as the result of credit 
authorization check (S12), service center 7 notifies user 
system 5 via settlement network 6 at real time lhat 
shopping can net be done (S17). When notified that 
shopping cannot be done, the user wit! retry the above 10 
steps from S 6 to S 8 i! he or she has another credit cards 
so that payment for ihe product can be changed to a dif¬ 
ferent credit card Then again, product data, personal 
data, and payment settlement data 21 are sent to serv¬ 
ice center 7. If there is no other credit card, it is not pos- ;s 
sibie to purchase ihe product. Therefore, the order 
content is filled out the order form, and the product can 
be ordered to toe pertinent shop by facsimile machine, 
or telephone, or mail. 

When approved by approval center 13 (Si 2), serv- so 
ice center 7 notifies the user system of the completion of 
order processing for the shopping (S13). Completion Of 
notification is done by displaying screen shown in Fig. 

9(B) on the computer screen of user system 5. 

When approved by approval center 13 (S12), as 
among Ihe product data, personal data, and payment 
settlement data 21 received from user system 5, service 
center 7 also notifies the pertinent shop systems 2 a to 
2 c ol the product data and personal data (product data, 
personal da la 22 ol Fig. 1) (SI 4). After receiving the 30 
product data and personal data 22 from service center 
7, toe shop system outputs order instruction by delivery 
processing unit 19 and delivers the ordered product to 
tire user (product delivery 23 in Fig. 1) (S20). At this 
lime, if delivery method or delivery fee of the product is ss 
stored in Ihe product data for each product, the delivery 
processing can be promptly performed by referring to 
the delivery method or delivery fee. 

Moreover, service center 7 Invoices for toe payment 
to approval center 13 (sales invoice 27 in Fig. 1) (Si 5 ). -to 
Because there are normally two or more credit card 
companies to which toe payment for toe product is 
made, the service center sums up the prices to be 
invoiced for each credit card company by accumulation 
unit 16. Sates invoice 27 is also sent on-line via the vs 
CAFIS similarly to credit authorization check 26. Or out¬ 
putting on a magnetic tape is also posable for off line 
invoice. Receiving sales invoice 27, approval center 13 
makes payment to service center 7 (payment collection 
28 in Fig. 1) (S21). Furthermore, approval center 13 so 
requests payment transfer 25 to toe user by payment 
ccBeclioo unit 17 (S 22 ). After collecting payments from 
approval center 13, service center 7 performs payment 
24 to the shop (S16). 

The on-line shopping of this invention is realized by 
the above procedure: The shop system receives pay¬ 
ment from Ihe credit card companies via the service 
center just like the ordinary payment caused by shop¬ 
ping with a credit card. 


Because the product data or personal data is sent 
from service center 7 to the business terminal of each 
drop system as shown in Fig. 10, the above data can be 
fetched into the system of sales processing and so on of 
each shop system. 

If toe data regarding product delivery or the data tor 
delivery fee and so on is stored in the product data, 
each shop system can promptly and efficienlly perform 
delivery business by using these data. 

In sending credit card data (and personal data) as 
the payment settlement data from the user system to 
toe service center, toe leakage ol credit card data can 
be prevented because sending is performed via a dedi¬ 
cated settlement network 6. 

Furthermore, security can be more improved 
because payment settlement data is enciphered. This 
helps resolve the leakage of credit card data winch has 
been causing a problem for toe on-line shopping via the 
Internet so far. 

Jn addition, the credit card data is sent to the crecfit 
card companies which are the approval centers, from 
toe service center via the CAFIS. For toe credit card 
companies, toe How is toe same as toe normal flow for 
receiving credit card data for shopping with a credit card 
even though the service center exists between toe 
users and the credit card companies. 

As shown in Fig. 13, the payment is performed Irom 
the credit card companies to each shop via the service 
center. But, because toe payment is done by the settle¬ 
ment among banks, toe payment flow is the same as the 
normal payment flow for shopping with a credit card tor 
both the credit card companies and shops even though 
toe service centef exist between the credit card compa¬ 
nies and sbops. 

Embodirrterrt 2. 

Jn this Embodiment 2, the encipherment method for 
encipherment unit 12 and the decoding method for 
decoding unit 14 of the above Embodiment t will be 
explained. 

Fig, 16 is a figure showring an example ol data to be 
enciphered and decoded, and data contents. 

With this embodiment, among the product data, 
personal data, payment settlement data 21 sent from 
user system 5 10 service center 7, especially the crecfit 
number, password code, and credit card expiration are 
enciphered as the credit card data. 

Fig. 17 through Fig. 19 are the figures explaining 
examples of enciphering crecfit card data 

Examples of encipherment shown in Fig. 17 
through Fig. 19 are explained. The credit card data to be 
enciphered is, as shown in (A) of Fig. 16, toe crecfit 
number, password code, and crecfit card expiration. And 
65 asshownin(B)of Fig. 16, thecredit number is 16 digits 
of 1234567890123456. The password cede is 4 digits of 
2468. The credit card expiration is 4 digits of 9903, 
which indicates that it can be used until March 1999. 
First, the encipherment example 1 shown in Fig. 17 
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is explained. 

The encipherment example 1 shown in (A) of Fig. 

17 shows scrambling credit card data, and concatenat¬ 
ing random number I generated by encipherment unit 
12 to the scrambled 24-digit credit card data so as to 
send it to service center 7 as the credit card data. The 
method of scrambling the above credit card data is as 
shown in (B) of Fig. 17. Of the 24-digit credit card data, 
the first digit is sifted to the second digit, the second dig# 
is shitted to the third digit, and the third digit is shifted to 
the fourth digit. In this way, digits are shitted one by one 
from left to right, and the 24!h digit is shifted to Die first 
digit. The credit card data enciphered in encipherment 
example 1 is decoded to the original data by decoding 
unit 14 of service center 7. The decoding method is, first 
of all, remove random number 1 from the credit card 
data including the received random number 1. Then, the 
first digit of the credit card data is sifted to the 24th digit, 
the second digit is shifted to the first digit, and the third 
digit is shifted to the second digit, and the fourth digit is 
shifted to the third digit. In this way. the original credit 
card data is restored by shifting digits from right to left 
one by one. 

For encipherment example 2 of Fig. 18, 24-digit 
credit card data, five digits of random number 1, in total 
29 digits are scrambled and sent to service center 7. 
The scramble method is as shown in (B) of Fig. 18. The 
First digit is shifted 1o the second digit, the second digit is 
shifted to the third digit, and the third digit is shifted to 
the fourth digit. Then. 28th digit is shifted to the 29th 
digit, and the 29th digit is shifted to the tiist digit. In this 
way, 29-digit data including the credit card data and ran¬ 
dom number 1 are shifted one by one irom left to right 
The decoding method of decoding unit 14 at service 
center 7 is to restore the received credit card data 
including random number 1 into Die original data with 
the method opposite to Die scramble method shown in 
(B) of Fig- 18. First of all. Die first digit is shifted to Die 
29th digit, the second digit is shifted to the first digit, the 
third digit is shifted to Die second digit, and the fourth 
digit is shifted to Die third digit. In Diis way, when Die 29- 
cfigit credit card data including random number 1 is 
shifted one by one horn right to left, the original 29-digit 
data is restored. When Die 29-digit credit card data 
including random number 1 is restored, the 24-digit 
credit card data is taken out by removing five (Sgite from 
the right, which are random number 1, out of the 29 dig¬ 
its. 

For encipherment example 3 of (A) ot Fig. 19, ran¬ 
dom number 1 and random number 2 are concatenated 
to Die scrambled credit card data and sent to service 
center 7. The method of scrambling Die credit card data 
of encipherment example 3 is the same as Die scramble 
method of Die credit card data of encipherment example 
1. For encipherment example 4 shewn in (B) of Fig. 19, 
24-digit credit card data and five digits of random 
number 1, in total 29 digits, are scrambled, and random 
number 2 is concatenated. The method of scrambling 
24-digit credit card data and Dve digits of random 


number 1. in total 29 digits, is Die same as the scramble 
method of Die above encipherment example 2. Further¬ 
more, for encipherment example 5 of (C) of Fig. 19,24- 
dSgit credit card data, 5-digH random number 1, and 6- 
5 digit random number 2, in total 35 digits ar e scrambi ed 
and sent to service center 7. 

In this embodiment 2, encipherment example 1 to 5 
were explained. However, Ihe above examples are only 
examples, and do not limit the methods of encipherment 
70 and decoding. 

In Diis way, by enciphering and sending the credit 
card data to the service center, moreover, by running 
the credit card data on the settlement network which is 
a dedicated line, security is further improved effectively. 
75 Having Dius described several particular embodi¬ 
ments of Die invention, various alterations, modifica¬ 
tions, and improvements will readily occur to those 
skilled in Die art Such alterations, modifications and 
improvements are intended to be part of this disclosure, 

20 and are intended to be within the spirit and scope of Die 

invention. Accordingly, the foregoing description is by 
way of example only, and not intended to be limiting. 
The invention is limited only as defined in the following 
claims and the equivalents thereto. 

25 

Claims 

1. An on-iine shopping system using a compuier net¬ 


work, comprising: 

(a) a store system for memorizing product data 
and providing a shopping man for products via 
a shopping mall network; 

(b) a user system, connected to the shipping 
mall network, including a product selection unit 
for selecting a product to be purchased from 
the shopping mall provided by the store sys¬ 
tem, a download unit for downloading Die 
selected product data from Die store system via 
the shopping maS network, and a transmission 
unit for inputting payment settlement data of 
the product and personal data of user who 
selects Die product, for setting a settlement 
network different Dorn the shopping malt net¬ 
work, aid for transmitting Die selected product 
data. Die pay merit settlement data and Die per¬ 
sonal data via Die settlement network based on 
a First protocol: and 

(c) a service center for receiving Die selected 

so product data, Die payment settlement cfota, and 

Die personal data via the settlement network, 
from Die user system and then performing a 
payment settlement. 

55 2, The on-fine shopping system of claim 1, further 
comprising an approval center for approving the 
payment settlement based on a second protocol 
efferent from Die First protocol, and wherein Die 
service center selects at feast the payment settte- 
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nient data among the received product data, the 
payment settlement data, and the persona? data 
received based on the first protocol, converts the at 
least the payment settlement data to be a suitable 
data to the second protocol, and then requests the s 
approval of fhe payment settlement to the approval 
center. 


the shopping mail network is a computer network 
that can be accessed by a third party, and the set¬ 
tlement network is a network set separately 
between the user system and the service center. 

It. The on-line shopping system of claim 10, wherein 
ttie shopping maH network is Internet 


3. The on-line shopping system of claim 2, wherein 

the user system includes an encipherment unit for io 
enciphering at least a part of foe selected product 
date, tire payment settlement data, and the per¬ 
sona! data, and wherein the service center includes 
a decoding unit tor decoding the enciphered part of 
the selected product date, the payment settlement T5 
date, and foe personal data. 

4 . The on-line shopping system of claim 1, wherein 
the service center further includes a distribution unit 

for distributing foe product data and foe personal so 
data for which foe payment settlement has been 
approved, and wherein foe store system further 
includes a delivery processing unit for receiving Ihe 
product date and foe personal data and then per¬ 
forms a delivery process of foe product 25 

5. The on-line shopping system of claim 2, wherein 
foe user system transmits foe card data of the credit 
card as foe payment settlement data, and wherein 

the approval center approves foe payment settle- oo 
merit based on Ihe card data. 

ft. The on-line shopping system ol claim 5, wherein 
foe download unit downloads foe product data with 
the same format from a plurality cl different shop- 3S 
ping malls, the transmission unit transmils one card 
data as foe payment settlement data for the plurality 
of products downloaded from foe plurality of difler- 
ent shopping malls, and wherein foe service center 
requests the approval center to collectively settle « 
the plurality of products with one card data. 

7. The on-line shopping system of dam 6, wherein 
the user system further includes a product confir¬ 
mation unit for selecting a product to be purchased 45 
from foe downloaded products. 

8. The on-line shopping system of claim 2, wherein 
the approval center further indudes a payment col¬ 
lection unit for collecting the payment based on the so 
card data. 

9. The on-line shopping center of claim 8, wherein the 
service center further includes an accumulation unit 

for summing up amounts of the payment settlement ss 
based on the card data hi correspondence with 
each of the plurality of foe approval centers. 

10. The on-line shopping system of claim 2, wherein 


12 . fhe on-line shopping system of daim It. wheiein 
the settlement network is formed by a public line, 
wherein the first protocol is Poinl-tO-Fpint Protocol, 
wherein foe second protocol is a protocol which is 
used between foe shop system and foe approval 
center for a shopping by foe credit card. 

13. A payment settlement method which has a store 
system offering shopping malls, a user system that 
selects a product to be purchased from foe shop¬ 
ping malls, a credit card company system that 
approves a payment settlement with a credit card, 
ad a service center which exists among foe store 
system, the user system and foe credit card com¬ 
pany system, foe payment settlement method, 
comprising steps of: 

(a) selecting a product to be purchased from 
shopping malls offered by a shopping system 
via a shopping mall network in foe user system; 

(b) downloading foe data of the selecled prod¬ 
ucts from the shopping system into foe user 
system via foe shopping mad network; 

(c) transmitting foe data of the downloaded 
products, foe data ot foe credit card for foe pay¬ 
ment settlement, and foe data of the purchaser 
of foe product from foe user system to foe serv¬ 
ice center using a settlement network different 
from the shopping malt network, 

(d) requesting an approval of foe payment set¬ 
tlement from foe service center to foe credit 
card company system based on foe credit card 
data for foe payment settlement; 

(e) approving foe payment settlement in ihe 
credtt card company system based on foe 
credH card date; 

(0 distributing foe product data approved by the 
crodi! card company system for the payment 
settlement and foe date of foe product pur¬ 
chaser from foe service center to foe store sys¬ 
tem; and 

(g) collecting the payment in foe credit card 
company system from foe purchaser of foe 
product based on foe credit card data. 

14, The payment settlement method of dam 13. 
wherein foe step for requesting foe approval of foe 
payment settlement includes a step of converting 
foe received credit card data suitable to a prede- 
ffoed approval protocol provided by foe credit card 
company system. 
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15. The payment settlement method of ctawn 13. 
wherein the step for selecting the product includes 
a step of selecting products from different shopping 
malts, and wherein the step tor downloading 
includes a step of storing the data of products 5 
selected from different shopping malts in a same 
format 

16. The payment settlement method of claim 15, fur¬ 
ther comprising steps of confirming a product to be to 
purchased based on the product data downloaded 
between the downloading step and the transmitting 
step. 

17. The payment settlement method of claim 16, fur- rs 
ther comprising step of corresponding one credit 
card data to the plurality of products selected from 
the different shopping malls between the above 
downloading step and the transmitting step, and 
wherein the step for approving the payment settle- 20 
ment includes stop of settling cotlectivety for the 
plurality of products purchased based on one credit 
card data. 

18. The payment settlement method of claim 17, fur- is 
ther comprising step of connecting the user system 

to tntemet as the shopping mall network to access 
the shopping mail. 

19. The payment settlement method of claim 18. 30 
wherein the transmitting step includes a step of 
generating a settlement network using a public line 
based on Poinf-to-Point Protocol. 
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Fig.2 
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START 
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Si 


USER CONNECTS SHOPPING MAIL 



COMMUNICATION 
VIA COMPUTER 
NETWORK 


USER SELECTS PRODUCT TO BE 
PURCHASED 


USER INPUTS PERSONAL DATA 


COMMUNICATION 
VIA SETTLEMENT 
NETWORK 


USER INPUTS CREDIT CARD DATA W 


SETTLEMENT NETWORK 


I 


n 


si a 


SERVICES CENTER RECIEVES PRODUCT DATA, 
PERSONAL DATA, PAYMENT SETTLEMENT DATA. 


CONTINUED TO FIG.3 
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CONTINUED FROM FIG.2 
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PERSONAL DATA ENTRY 


NAWE(KANJI) : 
KANA LETTERS : 
ZIP 

PREFECTURE ; 
ADDRESS : 
PHONE NO. : 
DATE OF BIRTH 
AGE : ( 


SEX : 


BLOOD TYPE : Q 


ENTER DATA BELOW IF PRODUCT TO BE DELIVERD 
TO THE ADDRESS OTHER THAN ABOVE 


NAME (KAN Jl) : 
KANA LETTERS : 
ZIP 


] 


L 


PREFECTURE : [ 

ADDRESS: 

PHONE NO. : 


CLICK OK BUTTON TO CONFIRM 

ABOVE ALL CORRECT 


OK 











EP 0 779 587 A2 


Fig.3 


/34 


1 - 

Credit Card Data Entry 

CHOOSE YOUR CREDIT CARD BEING USED [ 

AMEX 

ENTER YOUR CREDIT CARD NUMBER (16 DIGITS) 

r 

_ 

-1 I 

ENTER YEAR AND MONTH GOOD THROUGH 


OF YOUR CREDIT CARD ABOVE 



(EX : DECEMBER 1999=9912) 

r ‘ - 


ENTER YOUR PASSWORD CODE (4 DIGITS) 


ENTER PAYMENT METHOD Q 



t. LUMP SUM 2. INSTALLMENTS 3.REVOLVING 

CLICK OK BUTTON TO CONFIRM 


L 

ABOVE ALL CORRECT 

OK | 
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data item name 


NO. OF BYTES 
1 


vcnvivi^ . . 

FpRODUCT NAME 

30 

MAKER 

20 

____i 

PRODUCT CODE 

30 

{PRODUCT SUB CODE 

20 

-——-—-H 

TYPE OF CURRENCY 

1 

PRICE 

15 

TAX INFORMATION 

5 (%) 

quantity attribute 

S TT * 

i_—-— 


QUANTITY__ 

ORDER TIME__ 

ORDER EXPIRATION 
INVENTORY INFORMATION 
DELIVERY METHOD 
product inform ation 

SHOPPING MALL ID CODE 

SHOP ID CODE 
MALL 

TERMS OF FREE CHARGE 
LOWERMOST PURCHASE 

amount for free mail. 


VARIABLE LENGTH 
VARIABLE LENGTH 
VARIABLE LENGTH 
8 


CONTINUED TO NEXT PAGE 
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CONTINUED FROM FIG.14 
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(16 DIGITS) (4 DIGITS) _ ____ 


CREDIT CARD DATA (24 DIGITS) 


(B ) CREDIT NO.= 1234567890123456 
I PASSWORD CODE =2463 

EXPIRATION =9903 (1999 MARCH) 


Fig-17 


example of encipherment 1 


(A) CREDIT CARD DATA 4 
AFTER SCFIAMBLE 


RANDOM number 1 


DATA 

digit 1 — DIGIT 2 
DIGIT 2 -* DIGIT 3 
DIGIT 3 — DIGIT 4 


DIGIT 23 - DIGIT 24 

DIGIT 24 - DIG1TJ_ 
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;A) SCFtAMBLES 29 ra®TS NU MBER ^ 

CREDIT CARD DMA DIGITS) 

(24 DIGITS) x 


• B ) scramble METHOD 


digit 1 

DIGIT 2 
DIGIT 3 



DIGIT 2 
DIGIT 3 
DIGIT 4 


DIGIT 29 
DIGIT 1 


Fig.19 




OF^REWT C«D DWA (24 DIGITS) + 

SCRAMBLES 3 s J>K3ITS ^g, 

OF CREDIT CARD D + RANDOM 

.RANDOM NUMBER 2 16 DIGITS, 

NUMBER 1 (5 D!G1 _____~— 
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(57) When performing on-line shopping using the 
internet, and when performing payment settlement for a 
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thereby causing a security problem. The user decides 
the product he or she wants to buy via a computer net¬ 
work (Internet) from a user system. Then, a transmis¬ 
sion unit calls up a service center to send order data 

Fig.1 


including the credit card data via a settlement network. 
Service center invoices the sales price to an approval 
center based on the order data. Approval center pays 
the price to service center. Then, service center sends 
the order data to the shopping system. A delivery 
processing unit then delivers the product to the user 
based on the order data. 
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